Lucene search

[email protected]CVE-2015-7320

HistorySep 29, 2015 - 7:59 p.m.

CVE-2015-7320

2015-09-2919:59:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2015-7320

cross-site scripting

xss

cpabc_appointments_admin_int_bookings_list.inc.php

appointment booking calendar

wordpress

nvd

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in cpabc_appointments_admin_int_bookings_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
codepeople:appointment_booking_calendarcodepeople appointment booking calendarle1.1.7

CPE	Name	Operator	Version
codepeople:appointment_booking_calendar	codepeople appointment booking calendar	le	1.1.7

References

packetstormsecurity.com/files/133743/WordPress-Appointment-Booking-Calendar-1.1.7-XSS.html

www.securityfocus.com/archive/1/536556/100/0/threaded

www.securityfocus.com/archive/1/536557/100/0/threaded

wordpress.org/plugins/appointment-booking-calendar/changelog/

wpvulndb.com/vulnerabilities/8199

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.1%

JSON

Related for CVE-2015-7320

prion1 securityvulns2 packetstorm1 zdt1 patchstack1 wpvulndb1